An alternative plan for principal mapping

[Henry B. Hotz]

On Aug 1, 2006, at 9:03 AM, krbdev-request at mit.edu wrote:

> Date: Mon, 31 Jul 2006 20:48:17 -0500
> From: Will Fiveash <William.Fiveash at sun.com>
> Subject: Re: An alternative plan for principal mapping
> To: Rahul Srinivas <srahul at novell.com>
> Cc: krbdev at mit.edu
> Message-ID: <20060801014817.GA17901 at sun.com>
> Content-Type: text/plain; charset=us-ascii

...

> This relates to something I brought up before on this list and that is
> support for login policy plugins (LPP).  Note, this is distinct from
> password policy.  The KDC would interact with a LPP in two ways:

In effect this is an authorization policy, not an authentication policy.

------------------------------------------------------------------------ 
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu